mandiant/stringsifter

A machine learning tool that ranks strings based on their relevance for malware analysis.

72
/ 100
Verified

Employs Gradient Boosted Decision Trees (LightGBM) with learning-to-rank objectives trained on the EMBER malware dataset to prioritize forensically relevant strings. Provides `flarestrings` for consistent cross-platform string extraction and integrates seamlessly with FLOSS for analyzing obfuscated or encoded strings from memory dumps and sandbox outputs. Available as CLI tools, Python package, or containerized Docker image supporting batch processing and pipeline workflows.

754 stars. Available on PyPI.

Maintenance 13 / 25
Adoption 10 / 25
Maturity 25 / 25
Community 24 / 25

How are scores calculated?

Stars

754

Forks

129

Language

Python

License

Apache-2.0

Last pushed

Mar 11, 2026

Commits (30d)

0

Dependencies

5

Get this data via API

curl "https://pt-edge.onrender.com/api/v1/quality/ml-frameworks/mandiant/stringsifter"

Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.